Re: [Q] what do these portmap log entries mean?

[Michael Banck <mbanck@gmx.net>]

On Wed, Aug 23, 2000 at 11:59:00PM -0700, Nate Amsden wrote:
> > My latest port scan (nmap running through all -s options) results show

[port scan results]

> > And I'm behind a firewall, though my machine is not firewalled itself,
> > not yet at least.
> 
> What ports did you scan? i usually specify -p 1-65535 when using nmap. 
> if it were my machine i would for sure firewall all those
> services(except smtp).

huh, my protscan shows this:

Interesting ports on Blackbird (127.0.0.1):
Port    State       Protocol  Service
9       open        tcp        discard
13      open        tcp        daytime
21      open        tcp        ftp
23      open        tcp        telnet
25      open        tcp        smtp
37      open        tcp        time
111     open        tcp        sunrpc
119     open        tcp        nntp
139     open        tcp        netbios-ssn
757     open        tcp        unknown
1024    open        tcp        unknown
1025    open        tcp        listen
6000    open        tcp        X11

first of all, what are these "unknown" entries about? these ports are  
not listed in /etc/services.

and then, I use my machine as a gateway to the Internet, so is this
ipchains-chain alright or do I need more firewalling?
ipchains -A input -p tcp -i ippp0 -y -l -j DENY

ippp0 is my ISDN-device.

Thanks a lot,

Michael Banck